078df305be1ffa90e3955f51fbcdf7d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

078df305be1ffa90e3955f51fbcdf7d6
Size

20KB
MD5

078df305be1ffa90e3955f51fbcdf7d6
SHA1

04e58b536b21f7876debef66d15bd7ecdffa32aa
SHA256

d286d053347030ec7167e21e61b017a802a176e9a05c5797078989440f14435e
SHA512

ca446101b85563925ca852df0111364fd83d33f03ab0d578af74c655874e30f0688d44dce7ad8b35c53464db9480dff4ac4c38fde42edd4402022558dc6b0844
SSDEEP

96:7i/DHhmuFllyHCedyKSlbRq47NuilEJQyCZlQXUiydaprWsPatOuPIzn8N3wZqil:WwuFmHpfepuZ3ydVsoHRxWefOM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
078df305be1ffa90e3955f51fbcdf7d6

Files

078df305be1ffa90e3955f51fbcdf7d6
.exe windows:4 windows x86 arch:x86

058aa16e0cf8894f7e6c552e9c784144

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord593
ord598
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord717
ProcCallEngine
ord644
ord570
ord685
ord100
ord616
ord581

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ